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This paper presents specialized code generation techniques and runtime optimizations for 
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Despite the widespread use and adoption of cookies as the basis for web applications to 
keep state information, cookies present some design issues that are yet to be fully 
addressed. The fact that cookies are stored on client-side's memory means that they are 
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An important question tliat nnust be addressed in a coherent computing curriculum is which 
programming environments to use across the curriculum. For Java, currently the most 
widely used language in computing education, a wide variety of professional integrated 
development environments (IDEs) are available— -including the increasingly popular, open- 
source Eclipse environment. Professional IDEs for Java work well in advanced courses, but 
they are poorly matched to introductory courses because they ... 
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Full text available: ^ pdf(833.84 KB) Additional Information: full citation , abstract , references , index terms 

Interposition-based system enhancements for multitiered servers are difficult to build 
because important system context is typically lost at application and machine boundaries. 
For example, resource quotas and user identities do not propagate easily between 
cooperating services that execute on different hosts or that communicate with each other 
via intermediary services. Application-transparent system enhancement is difficult to 
achieve when such context information is obscured by complex servic ... 
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Full text available: ^pdf(2.30 MB) Additional Information: full citation , abstract , references , index terms 

As businesses continue to grow their World Wide Web presence, it is beconning increasingly 
vital for them to have quantitative measures of the mean client perceived response times of 
their web services. We present Certes (CIIEnt Response Time Estimated by the Server), an 
online server-based mechanism that allows web servers to estimate mean client perceived 
response time, as if measured at the client. Certes Is based on a model of TCP that 
quantifies the effect that connection drops have on mean ... 
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Full text available: ^pdfd 02.49 KB) Additional Information: full citation , abstract , references 

With tine advent of large-scale, wide-area networking testbeds, researcliers can deploy 
long-running services that interact with other resources on the Web. While such interaction 
can easily attract clients and traffic, our experience suggests that projects accepting outside 
input and interacting with outside resources must carefully consider the avenues for abuse 
of such services. The CoDeeN Content Distribution Network, deployed on PlanetLab, uses a 
network of caching Web proxy servers to intell ... 
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Volume 30 

Full text available: ^ pdf(61.19 KB) Additional Information: full citation , abstract , references 

In computer science education, the topic of computing theory is one that is commonly not 
well received by students. Career-oriented students often view the topic as irrelevant, and 
would rather learn new skills and technologies that they perceive will improve their future 
employment prospects. This paper outlines an approach that attempts to blend these two 
apparent extremes by using "popular" technologies, including XML, to motivate and 
illustrate concepts of computing theory in a first-year un ... 
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® An efficient boosting algorithnn for combining preferences Q 
Yoav Freund, Raj Iyer, Robert E. Schapire, Yoram Singer 
December 2003 The Journal of Machine Learning Research, Volume 4 

Full text available: ^ pdf(392.20 KB) Additional Information: full citation , abstract 

We study the problem of learning to accurately rank a set of objects by combining a given 
collection of ranking or preference functions. This problem of combining preferences arises 
in several applications, such as that of combining the results of different search engines, or 
the "collaborative-filtering" problem of ranking movies for a user based on the movie 
rankings provided by other users. In this work, we begin by presenting a formal framework 
for this general problem. We then describe and ... 

9 Document querying and transformation: Lazy XSL transformations Q 
Steffen Schott, Markus L. Noga 

November 2003 Proceedings of the 2003 ACM symposium on Document engineering 

Full text available: ^ pdf(335.83 KB) Additional Information: fuil citation , abstract , references , index terms 

We introduce a lazy XSLT interpreter that provides random access to the transfornnation 
result. This allows efficient pipelining of transformation sequences. Nodes of the result tree 
are computed only upon initial access. As these computations have limited fan-in, sparse 
output coverage propagates backwards through the pipeline. In comparative measurements 
with traditional eager implementations, our approach is on par for complete coverage and 
excels as coverage becomes sparser. In contrast to eag ... 

10 Information retievalk session 9: language models: Exploiting syntactic structure of Q 
queries in a langua g e modeling a pproach to IR 

Munirathnam Srikanth, RohinI Srihari 

November 2003 Proceedings of the twelfth international conference on Information and 
knowledge management 

Full text available: ^ pdf(182.91 KB) Additional Information: full citation , abstract , references , index terms 

Natural Language Processing (NLP) techniques have been explored to enhance the 
performance of Information Retrieval (IR) methods with varied results. Most efforts in using 
NLP techniques have been to identify better index terms for representing documents. This 
use in the indexing phase of IR has implicit effect on retrieval performance. However, the 
explicit use of NLP techniques during the retrieval or information seeking phase has been 
restricted to interactive or dialogue systems. Recent adva ... 
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Bjorn Knutsson, Honghui Lu, Jeffrey Mogul, Bryan Hopkins 

November 2003 ACM Transactions on Internet Technology (TOIT), Volume 3 issue 4 
Full text available: ^ pdf(927.92 KB) Additional Information: full citation , abstract , references , index terms 

Proxy-based transcoding adapts Web content to be a better match for client capabilities 
(such as screen size and color depth) and last-hop bandwidths. Traditional transcoding 
breaks the end-to-end model of the Web, because the proxy does not know the semantics 
of the content. Server-directed transcoding preserves end-to-end semantics while 
supporting aggressive content transformations. We show how server-directed transcoding 
can be integrated into the HTTP protocol and into the Implementat ... 
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Aske Simon Christensen, Anders M0ller, Michael I. Schwartzbach 

November 2003 ACM Transactions on Programming Languages and Systems (TOPLAS), 

Volume 25 Issue 6 

Full text available: ^ pdf(947.02 KB) Additional Information: full citation , abstract , references , index terms 

We incorporate innovations from the <bigwig> project into the Java language to provide 
high-level features for Web service programming. The resulting language, JWIG, contains 
an advanced session model and a flexible mechanism for dynamic construction of XML 
documents, in particular XHTML. To support program development we provide a suite of 
program analyses that at compile time verify for a given program that no runtime errors 
can occur while building documents or receiving form input, and ... 
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13 THESUS: Organizing Web document collections based on link semantics Q 
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Novennber 2003 The VLDB Journal — The International Journal on Very Large Data 

Bases, volume 12 Issue 4 
Full text available: ^ pdf(262.85 KB) Additional Information: full citation , abstract 

The requirements for effective search and management of the WWW are stronger than 
ever. Currently Web documents are classified based on their content not taking into account 
the fact that these documents are connected to each other by links. We claim that a page's 
classification is enriched by the detection of its incoming links' semantics. This would enable 
effective browsing and enhance the validity of search results in the WWW context. Another 
aspect that is underaddressed and str ... 
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Publisher Site 

Recognizing shallow linguistic patterns, such as basic syntactic relationships between 
words, is a common task in applied natural language and text processing. The common 
practice for approaching this task is by tedious manual definition of possible pattern 
structures, often in the form of regular expressions or finite automata. This paper presents 
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a novel memory-based learning method that recognizes shallow patterns in new text based 
on a bracketed training corpus. The training data are stored ... 

^5 Measuring and characterizing end-to-end Internet service performance Q 
Ludmila Cherkasova, Yun Fu, Wenting Tang, Amin Vahdat 

November 2003 ACM Transactions on Internet Technology (TOIT), Volume 3 issue 4 
Full text available: ^pdf(1.46 MB) Additional Information: full citation , abstract , references , index terms 

Fundamental to the design of reliable, high-perfornnance network services is an 
understanding of the performance characteristics of the service as perceived by the client 
population as a whole. Understanding and measuring such end-to-end service performance 
is a challenging task. Current techniques include periodic sampling of service characteristics 
from strategic locations in the network and instrumenting Web pages with code that reports 
client-perceived latency back to a performance server. Li ... 

Keywords: End-to-end service performance, QoS, network packet traces, passive 
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16 DOS protection: Using graphic turinq tests to counter automated DDoS attacks against Q 
web servers 

William G. Morein, Angelos Stavrou, Debra L. Cook, Angelos D. Keromytis, Vishal Misra, Dan 
Rubenstein 

October 2003 Proceedings of the 10th ACM conference on Computer and 
communication security 

Full text available: ^ pdf(256.83 KB) Additional Information: full citation , abstract , references , index terms 

We present WebSOS, a novel overlay-based architecture that provides guaranteed access 
to a web server that is targeted by a denial of service (DoS) attack. Our approach exploits 
two key characteristics of the web environment: its design around a human-centric 
interface, and the extensibility inherent in many browsers through downloadable "applets." 
We guarantee access to a web server for a large number of previously unknown users, 
without requiring pre-existing trust relationships between ... 

Keywords: Java, graphic turing tests, web proxies 

Protection in flexible operatin g system architectures 
Christophe Rippert 

October 2003 ACM SIGOPS Operating Systems Review, volume 37 issue 4 
Full text available: ^ pdf(751.23 KB) Additional Information: full citation , abstract , references 

This paper presents our work concerning flexibility and protection in operating system 
kernels. In nnost existing operating systems, security is enforced at the price of flexibility by 
imposing protection models on the system programmer when building his system. We prove 
that flexibility can be preserved by separating the management of the protection policy 
from the tools used to enforce It. We present the secure software framework we have 
Implemented in the THINK architecture to manage ... 

s Two sinnple attacks on Lin-Shen-Hwang's strong-password authentication protocol 
Wei-Chi Ku, Hao-Chuan Tsal, Shuai-Min Chen 

October 2003 ACM SIGOPS Operating Systems Review, volume 37 issue 4 
Full text available: pdf(290.66 KB) Additional Information: full citation , abstract , references 

In 2001, Lin, Sun, and Hwang proposed a strong-password authentication protocol, OSPA, 
which was later found to be vulnerable to a stolen-verifier attack and a man-in-the-middle 
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attack. Recently, Lin, Shen, and Hwang [10] proposed an improved protocol of OSPA and 
showed that the improved protocol can resist the guessing attack, the replay attack, the 
impersonation attack, and the stolen-verifier attack. Herein, we show that their protocol is 
still vulnerable to a replay attack and a denial-of-se ... 

Keywords: denial-of-service attack, password authentication, replay attack, stolen-verifier 
attack, strong password 



Object serialization and object inspector user interfaces are concerns that can be 
orthogonally implemented using introspection via meta-object protocols (MOP). The C+ + 
language lacks a formal meta-object protocol, although some are available as source pre- 
processors. A full MOP is not necessary for many classes of problems where basic 
introspection is useful. This paper describes a technique: extensible visitation of objects as 
a basic introspection primitive. 

20 Web: Query type classification for web document retrieval Q 
In-Ho Kang, GilChang Kim 

July 2003 Proceedings of the 26th annual international ACM SIGIR conference on 
Research and development in informaion retrieval 

Full text available: ^ pdf(225.50 KB) Additional Information: full citation , abstract , references , index terms 

The heterogeneous Web exacerbates IR problems and short user queries make them worse. 
The contents of web documents are not enough to find good answer documents. Link 
information and URL information compensates for the insufficiencies of content information. 
However, static combination of multiple evidences may lower the retrieval performance. We 
need different strategies to find target documents according to a query type. We can 
classify user queries as three categories, the topic relevance tas ... 

Keywords: URL information, combination of multiple evidences, link information, query 
classification 
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